Legal
Privacy Policy
How MAGWHIRL collects, uses, stores and protects personal information submitted through this website.
Last updated
[REVIEW BEFORE LAUNCH] This policy was drafted to match what the website actually does. It has not been reviewed by a lawyer. Have it checked against the Digital Personal Data Protection Act 2023 (India) — and the UK/EU GDPR if you accept enquiries from those regions — and replace every
[REVIEW]marker below.
Who we are#
This website is operated by MAGWHIRL Pvt. Ltd. For any question about this policy or about the personal data we hold, contact us using the details on our contact page.
Data protection contact: [REVIEW — name and e-mail address of the person responsible]
What we collect, and why#
Enquiries you send us#
When you submit the contact form we collect your name, e-mail address, and — if you choose to provide them — your telephone number, company name and the details of your enquiry.
We use this solely to respond to you and to keep a record of the correspondence. Lawful basis: taking steps at your request prior to entering a contract, and our legitimate interest in responding to business enquiries.
Newsletter subscriptions#
If you subscribe, we store your e-mail address and the date you confirmed. Subscription is double opt-in: you will receive a confirmation e-mail and are only added once you click the link in it. Lawful basis: your consent, which you can withdraw at any time using the unsubscribe link in every message.
Technical information#
When a form is submitted we record the originating IP address, browser user-agent string and referring page. This is used only to investigate abuse of the form and to operate rate limiting. Lawful basis: our legitimate interest in keeping the site secure.
Our web server also keeps standard access logs, which are retained for [REVIEW — typically 14–30 days].
Cookies#
This website sets a session cookie only when an administrator signs in to the content management area. Ordinary visitors are not given any cookie, and we do not use advertising or cross-site tracking cookies.
If analytics is enabled by the site administrator, the analytics provider may set its own cookies. [REVIEW — state whether Google Analytics is enabled, and add a consent banner if it is]
How long we keep it#
| Data | Retention |
|---|---|
| Contact enquiries | [REVIEW — suggested: 24 months from last contact] |
| Newsletter subscribers | Until you unsubscribe |
| Unconfirmed newsletter signups | 14 days, then deleted automatically |
| Server access logs | [REVIEW] |
Who we share it with#
We do not sell personal data, and we do not share it for marketing purposes.
We share it only with service providers who help us operate the site — our hosting provider and our e-mail delivery provider — and only to the extent needed to run the service. [REVIEW — name your hosting and e-mail providers here]
We will disclose information where we are legally required to.
Where it is stored#
Data is stored on servers located in [REVIEW — state the country].
Your rights#
You may ask us to:
- confirm what personal data we hold about you, and give you a copy
- correct anything inaccurate
- delete your data, where we have no continuing need or legal obligation to keep it
- stop using it for a particular purpose
- withdraw consent you previously gave
Contact us to make a request. We will respond within [REVIEW — 30 days is the usual commitment]. If you are unhappy with our response you may complain to the relevant supervisory authority.
Security#
Access to the administration area requires an account, passwords are stored using modern one-way hashing, and requests are rate limited. Data is transmitted over HTTPS. No system is perfectly secure, but we take the protection of enquiry data seriously and review it periodically.
Changes#
If we change this policy we will update the date below. Material changes will be made obvious on the page.
Last updated: [REVIEW — set on publication]